mirror of
https://github.com/0xMarcio/cve.git
synced 2025-05-28 01:04:30 +00:00
772 B
772 B
CVE-2016-3723
Description
Jenkins before 2.3 and LTS before 1.651.2 allow remote authenticated users with read access to obtain sensitive plugin installation information by leveraging missing permissions checks in unspecified XML/JSON API endpoints.
POC
Reference
- https://www.cloudbees.com/jenkins-security-advisory-2016-05-11
- https://www.cloudbees.com/jenkins-security-advisory-2016-05-11
Github
No PoCs found on GitHub currently.